Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: 7o3ZE7VaHj2BDqJuNIVv7UqCcMmfIHAN0bbn3FRT0Xk=
Subject key identifier: 07:DF:58:2F:AB:25:52:D4:19:11:FC:A3:33:0E:8E:B5:17:4B:FF:7A
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 019FAA1A701499D67E33609A63F56AD44038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0CF0
Signing time: Tue 28 Jul 2026 19:01:27 +0000
Manifest this update: Tue 28 Jul 2026 19:01:27 +0000
Manifest next update: Wed 29 Jul 2026 19:01:27 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: ZUoc/NCZGVPL/nlCTTcj1cN4lpS+8g+AqfzNjeKHsNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:70:14:99:d6:7e:33:60:9a:63:f5:6a:d4:40:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Jul 28 19:01:27 2026 GMT
Not After : Jul 29 19:01:27 2026 GMT
Subject: CN=07df582fab2552d41911fca3330e8eb5174bff7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:e1:e9:2a:05:02:1c:e1:11:26:6b:16:3d:
01:99:30:ce:9e:cf:e8:ce:05:bd:0f:1d:79:3c:a4:
38:a1:4b:b2:6f:9d:7c:cb:91:97:db:7f:7f:99:d1:
75:4c:fa:b7:e5:a6:a4:47:e4:88:e6:21:6b:8d:02:
e1:61:e6:eb:b9:cb:2c:9e:66:4c:6d:22:a1:3d:55:
54:58:7b:fa:82:3a:35:b8:b9:0a:3f:67:69:3a:68:
22:09:fa:3d:11:e5:e2:93:38:b6:ec:e2:d8:68:77:
6e:e7:8a:95:db:0c:d7:63:44:91:40:03:2f:9b:04:
a3:61:28:cf:e2:50:bb:0b:b1:f8:dc:4a:ec:49:6a:
d4:a2:a6:0a:ca:2a:63:10:0a:24:4b:c6:7c:2a:8f:
c5:8c:a6:3f:f4:be:03:92:19:81:d7:40:fa:d5:aa:
d5:30:be:b8:08:25:cb:67:22:58:9c:38:52:7b:03:
37:af:f9:ac:6d:b6:a7:67:03:95:be:23:41:bf:35:
a8:14:0f:3b:29:5f:df:00:1e:84:94:9e:4b:4a:15:
fe:e2:cb:70:f5:62:53:54:3d:3f:39:c6:e7:dc:5c:
97:28:15:cd:b3:71:ef:52:09:b2:89:25:9b:00:64:
2e:b6:59:6d:46:78:21:9e:3a:0e:34:23:f5:de:87:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DF:58:2F:AB:25:52:D4:19:11:FC:A3:33:0E:8E:B5:17:4B:FF:7A
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:6c:de:6d:10:93:da:c8:b0:01:e4:82:05:6e:2f:61:9e:
56:69:f0:1d:f9:3a:d2:3e:93:78:8a:ca:7a:33:c6:b0:2d:aa:
26:44:73:ba:cb:d7:00:ff:67:f0:a1:c0:d3:0e:20:76:fc:f1:
11:0d:60:e5:3a:0d:99:ef:61:9e:5e:37:3e:ce:7e:48:8b:ad:
44:28:c8:39:b7:aa:29:89:b6:d5:c9:cc:9f:4f:43:64:ce:51:
1b:74:24:d8:04:9d:7e:4d:a4:0c:d3:d5:8c:ee:66:71:db:54:
67:7c:32:01:b1:ca:90:99:bb:18:e0:5f:ca:a4:30:04:4e:a4:
f2:67:38:76:f7:31:5d:f0:76:b6:b6:a7:a4:a3:41:c5:e3:7e:
7d:c4:08:bc:a9:0f:9d:55:c8:ae:6f:7a:4d:b1:db:26:af:63:
5f:13:d4:b2:b9:69:7a:52:a3:96:ab:ea:05:63:6f:59:54:0e:
69:f3:1b:bc:85:64:71:50:f4:67:33:48:ff:f8:8e:1e:d3:38:
f4:5e:9d:d0:d0:f2:06:0c:f4:5b:70:aa:60:de:02:5b:4f:c1:
a1:8a:3f:3c:b6:ed:71:6b:14:87:a5:6b:af:a5:f5:e1:c0:45:
8a:36:e3:a4:f9:cc:08:1d:04:a2:c8:fb:1f:19:57:03:ef:b6:
54:a3:44:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGnAUmdZ+M2CaY/Vq1EA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTFjODkxMWVkYmFlMzZkZjFhODBiYmU4MTRiMjVhMGY5
NDM5ZmEwHhcNMjYwNzI4MTkwMTI3WhcNMjYwNzI5MTkwMTI3WjAzMTEwLwYDVQQD
EygwN2RmNTgyZmFiMjU1MmQ0MTkxMWZjYTMzMzBlOGViNTE3NGJmZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaHh6SoFAhzhESZrFj0BmTDOns/o
zgW9Dx15PKQ4oUuyb518y5GX239/mdF1TPq35aakR+SI5iFrjQLhYebrucssnmZM
bSKhPVVUWHv6gjo1uLkKP2dpOmgiCfo9EeXikzi27OLYaHdu54qV2wzXY0SRQAMv
mwSjYSjP4lC7C7H43ErsSWrUoqYKyipjEAokS8Z8Ko/FjKY/9L4DkhmB10D61arV
ML64CCXLZyJYnDhSewM3r/msbbanZwOVviNBvzWoFA87KV/fAB6ElJ5LShX+4stw
9WJTVD0/Ocbn3FyXKBXNs3HvUgmyiSWbAGQutlltRnghnjoONCP13ofOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAffWC+rJVLUGRH8ozMOjrUXS/96MB8GA1UdIwQY
MBaAFOcRyJEe26423xqAu+gUsloPlDn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhISWtSN2JyamJmR29DNzZCU3lXZy1VT2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYWZjMTUtMWU3OS00ZmU5LTlmYWQt
MDNhNGRkNGE5MTU2LzEvNXhISWtSN2JyamJmR29DNzZCU3lXZy1VT2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYWZjMTUtMWU3OS00ZmU5LTlmYWQtMDNhNGRkNGE5MTU2
LzEvNXhISWtSN2JyamJmR29DNzZCU3lXZy1VT2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR91s3m0Q
k9rIsAHkggVuL2GeVmnwHfk60j6TeIrKejPGsC2qJkRzusvXAP9n8KHA0w4gdvzx
EQ1g5ToNme9hnl43Ps5+SIutRCjIObeqKYm21cnMn09DZM5RG3Qk2ASdfk2kDNPV
jO5mcdtUZ3wyAbHKkJm7GOBfyqQwBE6k8mc4dvcxXfB2tranpKNBxeN+fcQIvKkP
nVXIrm96TbHbJq9jXxPUsrlpelKjlqvqBWNvWVQOafMbvIVkcVD0ZzNI//iOHtM4
9F6d0NDyBgz0W3CqYN4CW0/BoYo/PLbtcWsUh6Vrr6X14cBFijbjpPnMCB0Eosj7
HxlXA++2VKNEZw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:47 2026 by rpki-client